LionWiki 3.x Shell Upload

Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author: ayastar Software Link: http://lionwiki.0o.cz Version: 3.X Tested on: ubuntu 9.10 english CVE : yes Code : exploit code hi brother's and all muslims this is my first bug : dork : "powered by LionWiki " exploit :...

LionWiki 3.x - 'index.php' Arbitrary File Upload

Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author: ayastar Software Link: http://lionwiki.0o.cz Version: 3.X Tested on: ubuntu 9.10 english CVE : yes Code : exploit code hi brother's and all muslims this is my first bug : dork : "powered by LionWiki " exploit :...

shopxp online shopping system v7. 4 0day-vulnerability warning-the black bar safety net

Vulnerability version: shopxp online shopping system v7. 4 Keywords: inurl:shopxpnews. asp shopxpnews. asp Storm password statement: /TEXTBOX2. ASP? action=modify&news%69d=1 2 2%20and%2 0 1=2%20union%20select%201,2,admin%2bpassword,4,5,6,7%20from%20shopxpadmin...

Adult Video Site Cross Site Request Forgery

======================================================================================== | Title : ADULT VIDEO SITE SCRIPT CSRF Chang Admin Password Exploit | Author : indoushka | Home : www.dz-blackhat.com | | Web Site : http://hotfile.com/dl/32750290/bcc0159/videoscript.rar.html | Tested on:...

DreamHost <= && > 2.3 global Inj3ct0r/Xss/Local inc Multiple Exploit

================================================= DreamHost = && 2.3 global inj3ct0r.com Exploit ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / ...

CVE-2009-4675

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

Design/Logic Flaw

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

CVE-2009-4675

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

CVE-2009-4675

CVE-2009-4675 describes a flaw in the Mole Group Gastro Portal (Restaurant Directory) where admin/admin_info/index.php does not require administrative authentication, enabling remote attackers to change the admin password through an unspecified form submission. The NVD CVSS v2 base score is 7.5 (...

Gravity Board X 2.0 Beta (Public Release 3) - SQL Injection

Gravity Board X 2.0 Beta Public Release 3 - SQL Injection !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit co...

SphereCMS 1.1 Alpha Blind SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor: http://sphere.xlentprojects.se/ Vulnerable Version: 1.1 alpha Latest version till now Exploitation: Remote with browser Fix: N/A - Description: SphereCMS is a CMS which allow managing foru...

CVE-2010-0638

Cross-site request forgery CSRF vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely...

Video Games Rentals Script - SQL Injection

Exploit Title: video games rentals Script SQL injection Vulnerability Date: 11/02/2010 Author: JaMbA Software Link: N/A Version: all version Tested on: Windows & Linux CVE : ::::::::::::::::::::::::: Exploit Title : video games rentals Script SQL injection Vulnerability Author : JaMbA Script Site...

Home Of AlegroCart 1.1 - Cross-Site Request Forgery (Change Administrator Password)

Home Of AlegroCart 1.1 - Cross-Site Request Forgery Change Administrator Password ---------------------------------------------------------------- + Home Of AlegroCart v1.1 - Xsrf Change Administrator Password // Author Info x Author: The.Morpheus x Contact: [email protected] x Thanks:...

PHP Product Catalog Cross Site Request Forgery

Title: PHP Product Catalog - CSRF Change Administrator Password Date: 28/1/2010 Author: bi0 Software Link: http://www.tantumweb.com CVE : /\ == \ /\ \ /\ \ \ \ Admin : Passwd Email : |-------------------------------------------------------------------------------| // End of attack -------...

ezContents CMS Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: ezContents CMS Multiple Vulnerabilities Vendor: http://ezcontents.org/ Vulnerable Version: 2.0.3 and prior versions Exploitation: Remote with browser Fix: N/A - Description: ezContents is a nice PHP CMS which allow management of dynamic...

CeleronDude 5.3.0 Shell Upload / Database Password

Uploader by CeleronDude 5.3.0 - Upload Vulnerability Discovered by : Stink' Date : 2009-12-17 for upload. 2010-01-17 for Settings.db retrieve password. Dork : "Uploader by CeleronDude." Website Publisher : http://www.celerondude.com/php-uploader-v5 -- Upload Vulnerability -- Rename your shell.php...

Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (2)

Uploader by CeleronDude 5.3.0 - Arbitrary File Upload 2 Uploader by CeleronDude 5.3.0 - Upload Vulnerability Discovered by : Stink' Date : 2009-12-17 for upload. 2010-01-17 for Settings.db retrieve password. Dork : "Uploader by CeleronDude." Website Publisher :...

easyPortal 1.0.0 XSS / XSRF

----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010. ----------------------------------------------------------------------------------------------- Application: easyPortal...

eazyPortal 1.0.0 - Multiple Vulnerabilities

eazyPortal 1.0.0 - Multiple Vulnerabilities ----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010...